October 4, 2023
June 4, 2025

Dive Into The dYdX Chain Audit

dYdX
Dive Into The dYdX Chain AuditDive Into The dYdX Chain Audit

Introduction

Ensuring the safety and security of the dYdX Chain software is our top priority. That’s why we are extensively testing and auditing the code to make sure that user funds are always safe. Today, we’re sharing that Informal Systems has fully audited the dYdX Chain code and all findings have been addressed by the dYdX team. Dive into the audit below.

Details of the Audit

Informal Systems implements a multi-layered, automated approach to their security audits and is well-versed in security for the Cosmos Ecosystem. They audited the dYdX Chain code in three phases.

Phase I covered:

  • Custom modules: x/assets, x/perpetuals, x/epochs, x/sending, x/prices, x/subaccounts,
  • Liquidation and price-feed daemons
  • Custom changes to forked versions of CometBFT and Cosmos SDK.

Phase II covered:

  • Custom modules: x/clob
  • Custom changes to forked versions of CometBFT and Cosmos SDK.

Phase III covered:

  • Custom modules: x/bridge, x/delaymsg, x/rewards, x/vest
  • Bridge Daemon
  • Additional custom changes to the forked version of CometBFT.

All phases of the audit are complete and we’re proud that zero critical issues currently exist within the dYdX Chain source code. The audit surfaced 1 critical issue (that is now resolved), 4 medium issues, 17 low issues and 19 informational issues. 34 of those issues were accepted and 5 issues were functioning as designed.

Thank you

Thank you to Informal Systems for their thorough audit and their commitment to help us ensure the safety and security of the dYdX Chain. We’re also hosting a bug bounty for the dYdX Chain software with payouts up to $5,000,000 depending on severity and eligibility. Any issues brought up in the audit or otherwise known by the dYdX team are not eligible for the bug bounty, and other terms and conditions apply. See the details here.

Find Informal Systems on Twitter, Github, and LinkedIn.

Legitimacy and Disclaimer

© 2025 dYdX International Ltd. All rights reserved.

dYdX is a decentralised, disintermediated and permissionless protocol, and is not available in the U.S. or to U.S. persons as well as for Restricted Persons as set out in the dYdX Software Terms of Use, accessible: https://dydx.exchange/v4-terms. dYdX International Ltd (“DI”) does not develop, control or participate in the operation of any component of the dYdX Protocol (including the MegaVault).

The information provided in this website is for general informational purposes only and DI reserves the right to update, modify, or amend any contents herein, at its sole discretion and without prior notice.  Nothing herein should be used or considered as legal, financial, tax, or any other advice, nor as an instruction or invitation to act in any way by anyone.

Engaging in any activity involving crypto-assets (including trading crypto assets and depositing into the MegaVault) is risky due to high volatility. Returns are not guaranteed and may fluctuate over time depending on multiple factors, and you may lose your entire investment, particularly when using leverage. Investment into crypto-assets may not be regulated and may not be suitable for retail investors. You should perform your own research and due diligence before engaging in any activity involving crypto-assets.

In no event will DI be liable for any loss or damage, including without limitation, indirect or consequential loss or damage, arising from or in connection with the use of this website. By continuing to access this website, you agree to the above and accept the possibility of changes in the information provided.

Awarded Institutional DeFi Solution of the Year by Hedgeweek

Learn more

1 Leaderboard, 9 Seasons and $20M on the Line in Rewards

Learn more
Resources
Help CenterBlogAcademyMarketsBrandTerms of UsePrivacy Policy
Ecosystem
dYdX LabsdYdX FoundationdYdX Operations subDAOdYdX Grants subDAOAPINew iOS App
Market Pages
API3-USDBERA-USDNIL-USDNC-USDGAS-USD
Learn More
How To Purchase DYDXHow To Start TradingTrading Competition2024 Annual ReportDYDX BuybackExchangeCommunity
© 2025 dYdX International Ltd. All rights reserved.

dYdX is a decentralised, disintermediated and permissionless protocol, and is not available in the U.S. or to U.S. persons as well as for Restricted Persons as set out in the dYdX Software Terms of Use, accessible: https://dydx.exchange/v4-terms. dYdX International Ltd (“DI”) does not develop, control or participate in the operation of any component of the dYdX Protocol (including the MegaVault).

The information provided in this website is for general informational purposes only and DI reserves the right to update, modify, or amend any contents herein, at its sole discretion and without prior notice.  Nothing herein should be used or considered as legal, financial, tax, or any other advice, nor as an instruction or invitation to act in any way by anyone.

Engaging in any activity involving crypto-assets (including trading crypto assets and depositing into the MegaVault) is risky due to high volatility. Returns are not guaranteed and may fluctuate over time depending on multiple factors, and you may lose your entire investment, particularly when using leverage. Investment into crypto-assets may not be regulated and may not be suitable for retail investors. You should perform your own research and due diligence before engaging in any activity involving crypto-assets.

In no event will DI be liable for any loss or damage, including without limitation, indirect or consequential loss or damage, arising from or in connection with the use of this website. By continuing to access this website, you agree to the above and accept the possibility of changes in the information provided.

Leaving site

By clicking ‘Continue’, you will be leaving https://www.dydx.xyz/ and accessing a website made available by a third party using dYdX v4 open-source software that is independent from and unaffiliated with dYdX International Ltd (“DI”). DI does not deploy or run dYdX v4 open-source software for public use, nor does it operate or control any or all parts of the infrastructure. DI is not responsible for any actions taken by independent third parties or for any codes, materials and contents on any third-party websites, including the one you would access by clicking ‘Continue’.

DI’s contents and services are not available to persons who are residents of, are located or incorporated in, or have a registered office in the U.S., Canada or any Restricted Persons as set out in the dYdX v4 open-source software Terms of Use, accessible here.  More details can be found in our Terms of Use. Learn more about dYdX v4 third-party front end options here.

Continue